The Ostrich Approach To Vulnerability Management

<p>All links and images for this episode can be found on <a href= "https://cisoseries.com/the-ostrich-approach-to-vulnerability-management"> CISO Series</a></p> <p>OK, you showed us our vulnerability. But we really don't want to fix it now. Could we just pay you off to keep quiet, and to buy us some more time to deal with this in a "not so timely" manner?</p> <p>This week’s episode is hosted by me, <a href= "https://www.linkedin.com/in/davidspark/">David Spark</a> (<a href="http://twitter.com/dspark">@dspark</a>), producer of CISO Series and <a href= "https://www.linkedin.com/in/mikevj/">Mike Johnson</a>. Our guest is <a href="https://www.linkedin.com/in/sameersait/">Sameer Sait</a> (<a href="http://twitter.com/sameersait">@sameersait</a>), CISO, Amazon - <a href="http://wholefoods.com/">Whole Foods</a>.</p> <p><strong>Thanks to our podcast sponsor, Code42</strong></p> <p><a title="Code42" href= "https://www.code42.com/go/cpg-reputation-awareness-security/?utm_source=ciso&utm_medium=display&utm_campaign=_cpg-reputation&utm_content=2021_cpg-reputation-awareness_podcast"> <img src= "https://assets.libsyn.com/secure/show/24425/Code42_Q1_RepCamp_Ad6_600x100.png" alt="Code42" width="640" height="100" /></a></p> <p><em>As organizations gradually and cautiously move out of adapt out of adapt-or-die mode into the post-pandemic era, we can expect a second phase of digital transformation: resilience building. This presents an opportunity for security teams. An opportunity to re-imagine data security. <a href= "https://www.code42.com/go/cpg-reputation-awareness-security/?utm_source=ciso&utm_medium=display&utm_campaign=_cpg-reputation&utm_content=2021_cpg-reputation-awareness_podcast"> More from Code42</a>.</em></p> <p>In this episode:</p> <ul> <li>What if software developers used academic citations for code acquired from outside sources?</li> <li>What is a reported security vulnerability doesn't get fixed? Where do you go next?</li> <li>What if a 3rd party app developer needs access to a file/print share over the internet?<